Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/e156f456-0f31-3bb6-a844-4b8299d7ca1e.roa
File:                     e156f456-0f31-3bb6-a844-4b8299d7ca1e.roa (raw, json)
Hash identifier:          l0C9wqYzLfBEhoAGy6MYEsOoUuw7ho8JihB0JYUn9Xk=
Subject key identifier:   62:19:9E:58:C9:49:89:7B:B4:D4:2B:78:BC:84:AE:05:52:3C:51:B5
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584DA8157EFCF7BCBDACB6B30800
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/e156f456-0f31-3bb6-a844-4b8299d7ca1e.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     60841
IP address blocks:        2605:7940:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:7e:fc:f7:bc:bd:ac:b6:b3:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=b74848be-af6e-463a-ad31-da554a642531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:16:63:12:a1:1a:4f:62:80:95:ab:59:5d:
                    97:3f:67:fc:37:4d:7d:7b:65:8b:d0:8d:4e:78:67:
                    1a:7a:a0:6a:cf:bd:ba:b6:c0:15:ef:60:b6:43:eb:
                    9f:0a:2b:15:36:86:42:f8:d7:ee:3c:32:d2:6a:3d:
                    69:ca:b1:5a:84:9c:1f:e7:11:e0:7d:7b:1f:96:94:
                    de:b1:60:b8:ff:fe:4c:a4:fb:60:62:52:7d:ea:df:
                    7c:a3:93:c4:1b:66:1c:1b:b2:f3:35:25:ef:06:ae:
                    34:ea:44:2b:bd:d1:d7:94:c4:80:42:40:97:33:56:
                    e5:e1:ba:a3:65:f1:a0:21:69:c8:7e:a2:66:7f:1a:
                    8b:f0:fb:4e:3a:78:ae:fd:c5:d3:8d:5f:14:15:f1:
                    01:09:03:e7:5c:b0:b2:21:0b:e1:c3:03:59:a7:64:
                    02:0e:ef:04:09:62:b4:fa:7e:96:36:7a:5f:64:ac:
                    be:e7:01:6d:99:cb:89:de:f9:98:81:0d:6f:35:bb:
                    41:31:b6:5a:91:7c:74:86:c0:b3:6e:5e:76:72:02:
                    0a:98:ff:d1:01:23:d0:d7:b6:e6:71:92:99:d7:66:
                    5f:58:a0:ec:c6:b5:77:29:ad:84:08:2b:97:4f:ff:
                    af:b1:fa:47:ae:e3:58:44:cc:f8:5a:64:f6:fb:d4:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:19:9E:58:C9:49:89:7B:B4:D4:2B:78:BC:84:AE:05:52:3C:51:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/e156f456-0f31-3bb6-a844-4b8299d7ca1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:7940:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:cb:88:9d:59:42:88:ab:6b:4e:75:92:d4:bf:da:d8:ad:
         e7:5c:ca:88:56:fc:e4:56:6b:76:be:e8:f9:d7:a6:a9:ac:76:
         ae:ea:af:1b:f8:45:c4:c1:1f:22:5a:23:37:41:85:6f:01:03:
         a1:2e:f2:f9:7c:6c:c3:cb:a7:eb:8e:d8:2e:ba:72:e6:49:39:
         53:a6:b1:7d:e7:ac:f6:dc:9c:d5:c8:ca:2f:35:94:78:44:ba:
         08:9a:c0:e1:6a:fc:7d:82:98:a9:1c:88:7f:54:63:1a:56:d5:
         36:01:12:9c:8d:16:5c:22:43:94:53:b9:f6:1e:d8:b3:32:83:
         f6:7d:2f:f1:96:97:c1:2d:6a:0a:fd:94:30:54:0a:f8:b1:e0:
         0f:d9:f0:2e:9b:33:3f:8a:94:5d:fa:63:c3:52:b7:b6:43:b0:
         89:f2:c8:6a:e8:ef:e3:40:73:36:a4:b2:ca:39:23:59:20:55:
         cd:0a:c7:79:fa:fd:54:83:07:f3:11:ed:0e:0e:60:b2:60:49:
         e0:6a:36:ce:be:a7:b4:63:37:70:37:0a:76:f0:25:99:b9:7b:
         78:01:38:c3:07:f8:56:99:60:5c:02:ac:8b:85:be:8c:8c:bc:
         b1:2f:77:4d:a1:26:c2:f6:fb:f3:14:8f:70:0f:29:51:d2:82:
         fb:05:47:dc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oFX7897y9rLazCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFjMTllNTctYTZmNS00YzQ4LWI0ZGYtYjhkNDJkN2I3
NDgzMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
Yjc0ODQ4YmUtYWY2ZS00NjNhLWFkMzEtZGE1NTRhNjQyNTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxYWYxKhGk9igJWrWV2XP2f8N019e2WL0I1O
eGcaeqBqz726tsAV72C2Q+ufCisVNoZC+NfuPDLSaj1pyrFahJwf5xHgfXsflpTe
sWC4//5MpPtgYlJ96t98o5PEG2YcG7LzNSXvBq406kQrvdHXlMSAQkCXM1bl4bqj
ZfGgIWnIfqJmfxqL8PtOOniu/cXTjV8UFfEBCQPnXLCyIQvhwwNZp2QCDu8ECWK0
+n6WNnpfZKy+5wFtmcuJ3vmYgQ1vNbtBMbZakXx0hsCzbl52cgIKmP/RASPQ17bm
cZKZ12ZfWKDsxrV3Ka2ECCuXT/+vsfpHruNYRMz4WmT2+9S+8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGIZnljJSYl7tNQreLyErgVSPFG1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMx
OWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0MmQ3Yjc0ODMvZTE1NmY0NTYtMGYzMS0z
YmI2LWE4NDQtNGI4Mjk5ZDdjYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzFjMTllNTctYTZmNS00YzQ4LWI0
ZGYtYjhkNDJkN2I3NDgzLzMxYzE5ZTU3LWE2ZjUtNGM0OC1iNGRmLWI4ZDQyZDdi
NzQ4My5jcmwwHwYDVR0jBBgwFoAU/pJi5eJ2pwPKSRroNOSF02JXoFgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMWMxOWU1Ny1hNmY1LTRjNDgtYjRkZi1iOGQ0
MmQ3Yjc0ODMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgV5QAAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACvry4idWUKIq2tOdZLUv9rYredcyohW/ORWa3a+6PnXpqmsdq7q
rxv4RcTBHyJaIzdBhW8BA6Eu8vl8bMPLp+uO2C66cuZJOVOmsX3nrPbcnNXIyi81
lHhEugiawOFq/H2CmKkciH9UYxpW1TYBEpyNFlwiQ5RTufYe2LMyg/Z9L/GWl8Et
agr9lDBUCvix4A/Z8C6bMz+KlF36Y8NSt7ZDsInyyGro7+NAczaksso5I1kgVc0K
x3n6/VSDB/MR7Q4OYLJgSeBqNs6+p7RjN3A3CnbwJZm5e3gBOMMH+FaZYFwCrIuF
voyMvLEvd02hJsL2+/MUj3APKVHSgvsFR9w=
-----END CERTIFICATE-----
Generated at Wed May 13 06:41:15 2026 by rpki-client